fixed secret token name